add forbidden and unauthenticated errors